Tessera
Folgen

Johan Berggren

@jbn.the4711.net

Digital Forensics and Incident Response @Google :: I write open source tools :: Creator of OpenRelik and Timesketch https://openrelik.org/ https://timesketch.org/ #DFIR • Posts are my own • he/him

37 Posts311 Follower199 Folgt
Johan Berggren@jbn.the4711.net · 2mo ago

New release: OpenRelik CLI. Built for both humans and machines. Hook it up to your favourite harness and operate your forensic workflows using agents. #DFIR

@openrelik.bsky.social · 2mo ago

OpenRelik CLI Run forensic workflows from the terminal, built for humans and machines. Install AI agent skill: $ openrelik skill install Chain workers ( --then ) or run in parallel ( --and ) $ openrelik run log2timeline --then psort --format jsonl 123 openrelik.org/docs/guides/...

Johan Berggren@jbn.the4711.net · 3mo ago

I'm proud to have been invited by the Swedish Armed Forces 4th Cyber Defence Unit and to contribute to a team that placed third in Locked Shields, organised by CCDCOE. Strong teamwork between Swedish and French Armed Forces made it possible.

Johan Berggren@jbn.the4711.net · 3mo ago

If you are an OSS maintainer or someone filing security bug reports. This is an essential read. We need an updated process to deal with the high rate of automated vulnerability reports and this initiative points out some very good advice and suggestions. www.cncf.io/blog/2026/04...

The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know

AI models have recently drastically changed the sophistication, speed and scale of software vulnerability discovery. It is now trivial for non-experts to find real vulnerabilities in software with…

cncf.io

Johan Berggren@jbn.the4711.net · 5mo ago

New version of OpenRelik (the #DFIR workflow engine) is out. New workflow UI, support for chords (task groups with callback), MCP server and much much more. Give it a try! Take a look at the new page for workers showcase, both official and community contributed: openrelik.org/workers/

OpenRelik Workers

openrelik.org

@openrelik.bsky.social · 5mo ago

OpenRelik 0.7.0 just dropped with configurable storage providers for RW or RO locations, chords with callback tasks, DuckDB to support querying file based databases, MCP server to integrate directly with automated AI workflows, new workers + much more! Full changelog: openrelik.org/changelog #DFIR

Eric Capuano@eric.zip · last yr.

🚀 Just launched: DetectionForge — a purpose-built platform for crafting, testing & validating @limacharlie.io detection rules. Perform detection unit tests & multi-org backtesting + import/export IaC 🔗 Try it: detectionforge.ddi.sh 💻 GitHub: github.com/Digital-Defe... #detectionengineering #secops

DetectionForge

DetectionForge - A comprehensive detection engineering environment for crafting, validating, and testing LimaCharlie detection rules

detectionforge.ddi.sh

Heather Adkins@argv.bsky.social · last yr.

Some excellent work by @craiggidney.bsky.social that reduces the number of qubits (in a quantum computer) required to break RSA by 20-fold. If you don’t have a migration plan to safe algorithms, now is the time to start one!

Craig Gidney@craiggidney.bsky.social · last yr.

I'm often asked if I'll redo the 2019 quantum factoring estimate. Denser storage by yokes, smaller magic factories by cultivation, slimmer approx arithmetic by Chevignard et al… surely the cost is lower now? Yes, it's lower now. security.googleblog.com/2025/05/trac... arxiv.org/abs/2505.15917

Tanisha L. Turner @cybersecdiva.bsky.social · 2y ago

Hayabusa - A sigma-based threat hunting and fast forensics 🔎 timeline generator for Windows event logs. It can easily be integrated with other hunting & DFIR tools such as Velociraptor & OpenRelik. Check it out 🔥🔥: github.com/Yamato-Secur... #threathunting #DFIR #sigma #cybersecurity #infosec

GitHub - Yamato-Security/hayabusa: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. - Yamato-Security/hayabusa

github.com

Tailscale@tailscale.com · 2y ago

It's easy to lose sight of the fact that, from a tech perspective, we're absolutely living in the future. Our CEO and co-founder @apenwarr.ca looks at just how powerful our modern machines are — and what that means for all of us

Living in the future, by the numbers

Instead of making the traditional New Year predictions, let’s talk instead about the beautiful technological future we live in: the one that exists right now but we don’t always notice.

tailscale.com

Johan Berggren@jbn.the4711.net · 2y ago

In Sweden you have to take every opportunity to surf, regardless of the weather and season.. this one is for @halvarflake.bsky.social (In Swedish, but the picture really tells the whole story :) www.svt.se/nyheter/loka...

Snöstorm i Jämtland – då surfade Årebor i Kallsjön

Vanligtvis brukar nysnö locka ut människor i backar och skidspår så här års. Men i veckan var det annat som lockade för ett gäng Årebor. Istället för att ta till vara på vinterns första ordentliga snö...

svt.se

Johan Berggren@jbn.the4711.net · 2y ago

When I moved back to Sweden a few years back my team snagged my password in this great tradition. The hack involved ketchup and I was very proud of everyone involved. bughunters.google.com/blog/6355265...

Blog: The Great Google Password Heist: 15 years of hacking passwords to test our security (and build team culture!)

The Leaving Tradition in Google's security team, which could be described as a type of small-scale offensive security exercise, is a great (and fun) example of team culture. Curious? See this blog pos...

bughunters.google.com